Описание
RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| rabbitmq-server | fixed | 4.3.0-2 | package | |
| rabbitmq-server | no-dsa | trixie | package | |
| rabbitmq-server | postponed | bookworm | package | |
| rabbitmq-server | postponed | bullseye | package |
Примечания
https://github.com/rabbitmq/rabbitmq-server/security/advisories/GHSA-fh5r-jpm3-fjwp
Связанные уязвимости
CVSS3: 4.8
ubuntu
4 месяца назад
RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13.
CVSS3: 3.5
redhat
4 месяца назад
RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13.
CVSS3: 4.8
nvd
4 месяца назад
RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13.
CVSS3: 4.8
msrc
4 месяца назад
RabbitMQ: Unsanitized vhost names allow for XSS in management UI
